123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428 |
- /* ssl/t1_meth.c */
- /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
- * All rights reserved.
- *
- * This package is an SSL implementation written
- * by Eric Young (eay@cryptsoft.com).
- * The implementation was written so as to conform with Netscapes SSL.
- *
- * This library is free for commercial and non-commercial use as long as
- * the following conditions are aheared to. The following conditions
- * apply to all code found in this distribution, be it the RC4, RSA,
- * lhash, DES, etc., code; not just the SSL code. The SSL documentation
- * included with this distribution is covered by the same copyright terms
- * except that the holder is Tim Hudson (tjh@cryptsoft.com).
- *
- * Copyright remains Eric Young's, and as such any Copyright notices in
- * the code are not to be removed.
- * If this package is used in a product, Eric Young should be given attribution
- * as the author of the parts of the library used.
- * This can be in the form of a textual message at program startup or
- * in documentation (online or textual) provided with the package.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions
- * are met:
- * 1. Redistributions of source code must retain the copyright
- * notice, this list of conditions and the following disclaimer.
- * 2. Redistributions in binary form must reproduce the above copyright
- * notice, this list of conditions and the following disclaimer in the
- * documentation and/or other materials provided with the distribution.
- * 3. All advertising materials mentioning features or use of this software
- * must display the following acknowledgement:
- * "This product includes cryptographic software written by
- * Eric Young (eay@cryptsoft.com)"
- * The word 'cryptographic' can be left out if the rouines from the library
- * being used are not cryptographic related :-).
- * 4. If you include any Windows specific code (or a derivative thereof) from
- * the apps directory (application code) you must include an acknowledgement:
- * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
- *
- * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
- * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
- * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
- * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
- * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
- * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
- * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
- * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
- * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
- * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
- * SUCH DAMAGE.
- *
- * The licence and distribution terms for any publically available version or
- * derivative of this code cannot be changed. i.e. this code cannot simply be
- * copied and put under another distribution licence
- * [including the GNU Public Licence.]
- */
- /* ====================================================================
- * Copyright (c) 1998-2015 The OpenSSL Project. All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions
- * are met:
- *
- * 1. Redistributions of source code must retain the above copyright
- * notice, this list of conditions and the following disclaimer.
- *
- * 2. Redistributions in binary form must reproduce the above copyright
- * notice, this list of conditions and the following disclaimer in
- * the documentation and/or other materials provided with the
- * distribution.
- *
- * 3. All advertising materials mentioning features or use of this
- * software must display the following acknowledgment:
- * "This product includes software developed by the OpenSSL Project
- * for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
- *
- * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
- * endorse or promote products derived from this software without
- * prior written permission. For written permission, please contact
- * openssl-core@openssl.org.
- *
- * 5. Products derived from this software may not be called "OpenSSL"
- * nor may "OpenSSL" appear in their names without prior written
- * permission of the OpenSSL Project.
- *
- * 6. Redistributions of any form whatsoever must retain the following
- * acknowledgment:
- * "This product includes software developed by the OpenSSL Project
- * for use in the OpenSSL Toolkit (http://www.openssl.org/)"
- *
- * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
- * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
- * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
- * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
- * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
- * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
- * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
- * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
- * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
- * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
- * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
- * OF THE POSSIBILITY OF SUCH DAMAGE.
- * ====================================================================
- *
- * This product includes cryptographic software written by Eric Young
- * (eay@cryptsoft.com). This product includes software written by Tim
- * Hudson (tjh@cryptsoft.com).
- *
- */
-
- #include <stdio.h>
- #include <openssl/objects.h>
- #include "ssl_locl.h"
- /*
- * TLS/SSLv3 methods
- */
- static const SSL_METHOD *tls1_get_method(int ver)
- {
- if (ver == TLS_ANY_VERSION)
- return TLS_method();
- #ifndef OPENSSL_NO_TLS1_2
- if (ver == TLS1_2_VERSION)
- return TLSv1_2_method();
- #endif
- #ifndef OPENSSL_NO_TLS1_1
- if (ver == TLS1_1_VERSION)
- return TLSv1_1_method();
- #endif
- #ifndef OPENSSL_NO_TLS1
- if (ver == TLS1_VERSION)
- return TLSv1_method();
- #endif
- #ifndef OPENSSL_NO_SSL3
- if (ver == SSL3_VERSION)
- return (SSLv3_method());
- else
- #endif
- return NULL;
- }
- IMPLEMENT_tls_meth_func(TLS_ANY_VERSION, 0, 0,
- TLS_method,
- ossl_statem_accept,
- ossl_statem_connect, tls1_get_method, TLSv1_2_enc_data)
- #ifndef OPENSSL_NO_TLS1_2_METHOD
- IMPLEMENT_tls_meth_func(TLS1_2_VERSION, 0, SSL_OP_NO_TLSv1_2,
- TLSv1_2_method,
- ossl_statem_accept,
- ossl_statem_connect, tls1_get_method, TLSv1_2_enc_data)
- #endif
- #ifndef OPENSSL_NO_TLS1_1_METHOD
- IMPLEMENT_tls_meth_func(TLS1_1_VERSION, SSL_METHOD_NO_SUITEB, SSL_OP_NO_TLSv1_1,
- TLSv1_1_method,
- ossl_statem_accept,
- ossl_statem_connect, tls1_get_method, TLSv1_1_enc_data)
- #endif
- #ifndef OPENSSL_NO_TLS1_METHOD
- IMPLEMENT_tls_meth_func(TLS1_VERSION, SSL_METHOD_NO_SUITEB, SSL_OP_NO_TLSv1,
- TLSv1_method,
- ossl_statem_accept,
- ossl_statem_connect, tls1_get_method, TLSv1_enc_data)
- #endif
- #ifndef OPENSSL_NO_SSL3_METHOD
- IMPLEMENT_ssl3_meth_func(SSLv3_method, ossl_statem_accept, ossl_statem_connect,
- tls1_get_method)
- #endif
- /*
- * TLS/SSLv3 server methods
- */
- static const SSL_METHOD *tls1_get_server_method(int ver)
- {
- if (ver == TLS_ANY_VERSION)
- return TLS_server_method();
- #ifndef OPENSSL_NO_TLS1_2
- if (ver == TLS1_2_VERSION)
- return TLSv1_2_server_method();
- #endif
- #ifndef OPENSSL_NO_TLS1_1
- if (ver == TLS1_1_VERSION)
- return TLSv1_1_server_method();
- #endif
- #ifndef OPENSSL_NO_TLS1
- if (ver == TLS1_VERSION)
- return TLSv1_server_method();
- #endif
- #ifndef OPENSSL_NO_SSL3
- if (ver == SSL3_VERSION)
- return (SSLv3_server_method());
- #endif
- return NULL;
- }
- IMPLEMENT_tls_meth_func(TLS_ANY_VERSION, 0, 0,
- TLS_server_method,
- ossl_statem_accept,
- ssl_undefined_function,
- tls1_get_server_method, TLSv1_2_enc_data)
- #ifndef OPENSSL_NO_TLS1_2_METHOD
- IMPLEMENT_tls_meth_func(TLS1_2_VERSION, 0, SSL_OP_NO_TLSv1_2,
- TLSv1_2_server_method,
- ossl_statem_accept,
- ssl_undefined_function,
- tls1_get_server_method, TLSv1_2_enc_data)
- #endif
- #ifndef OPENSSL_NO_TLS1_1_METHOD
- IMPLEMENT_tls_meth_func(TLS1_1_VERSION, SSL_METHOD_NO_SUITEB, SSL_OP_NO_TLSv1_1,
- TLSv1_1_server_method,
- ossl_statem_accept,
- ssl_undefined_function,
- tls1_get_server_method, TLSv1_1_enc_data)
- #endif
- #ifndef OPENSSL_NO_TLS1_METHOD
- IMPLEMENT_tls_meth_func(TLS1_VERSION, SSL_METHOD_NO_SUITEB, SSL_OP_NO_TLSv1,
- TLSv1_server_method,
- ossl_statem_accept,
- ssl_undefined_function,
- tls1_get_server_method, TLSv1_enc_data)
- #endif
- #ifndef OPENSSL_NO_SSL3_METHOD
- IMPLEMENT_ssl3_meth_func(SSLv3_server_method,
- ossl_statem_accept,
- ssl_undefined_function, tls1_get_server_method)
- #endif
- /*
- * TLS/SSLv3 client methods
- */
- static const SSL_METHOD *tls1_get_client_method(int ver)
- {
- if (ver == TLS_ANY_VERSION)
- return TLS_client_method();
- #ifndef OPENSSL_NO_TLS1_2
- if (ver == TLS1_2_VERSION)
- return TLSv1_2_client_method();
- #endif
- #ifndef OPENSSL_NO_TLS1_1
- if (ver == TLS1_1_VERSION)
- return TLSv1_1_client_method();
- #endif
- #ifndef OPENSSL_NO_TLS1
- if (ver == TLS1_VERSION)
- return TLSv1_client_method();
- #endif
- #ifndef OPENSSL_NO_SSL3
- if (ver == SSL3_VERSION)
- return (SSLv3_client_method());
- #endif
- return NULL;
- }
- IMPLEMENT_tls_meth_func(TLS_ANY_VERSION, 0, 0,
- TLS_client_method,
- ssl_undefined_function,
- ossl_statem_connect,
- tls1_get_client_method, TLSv1_2_enc_data)
- #ifndef OPENSSL_NO_TLS1_2_METHOD
- IMPLEMENT_tls_meth_func(TLS1_2_VERSION, 0, SSL_OP_NO_TLSv1_2,
- TLSv1_2_client_method,
- ssl_undefined_function,
- ossl_statem_connect,
- tls1_get_client_method, TLSv1_2_enc_data)
- #endif
- #ifndef OPENSSL_NO_TLS1_1_METHOD
- IMPLEMENT_tls_meth_func(TLS1_1_VERSION, SSL_METHOD_NO_SUITEB, SSL_OP_NO_TLSv1_1,
- TLSv1_1_client_method,
- ssl_undefined_function,
- ossl_statem_connect,
- tls1_get_client_method, TLSv1_1_enc_data)
- #endif
- #ifndef OPENSSL_NO_TLS1_METHOD
- IMPLEMENT_tls_meth_func(TLS1_VERSION, SSL_METHOD_NO_SUITEB, SSL_OP_NO_TLSv1,
- TLSv1_client_method,
- ssl_undefined_function,
- ossl_statem_connect,
- tls1_get_client_method, TLSv1_enc_data)
- #endif
- #ifndef OPENSSL_NO_SSL3_METHOD
- IMPLEMENT_ssl3_meth_func(SSLv3_client_method,
- ssl_undefined_function,
- ossl_statem_connect, tls1_get_client_method)
- #endif
- /*
- * DTLS methods
- */
- static const SSL_METHOD *dtls1_get_method(int ver)
- {
- if (ver == DTLS_ANY_VERSION)
- return DTLS_method();
- #ifndef OPENSSL_NO_DTLS1
- else if (ver == DTLS1_VERSION)
- return DTLSv1_method();
- #endif
- #ifndef OPENSSL_NO_DTLS1_2
- else if (ver == DTLS1_2_VERSION)
- return DTLSv1_2_method();
- #endif
- else
- return NULL;
- }
- #ifndef OPENSSL_NO_DTLS1_METHOD
- IMPLEMENT_dtls1_meth_func(DTLS1_VERSION, SSL_METHOD_NO_SUITEB, SSL_OP_NO_DTLSv1,
- DTLSv1_method,
- ossl_statem_accept,
- ossl_statem_connect,
- dtls1_get_method, DTLSv1_enc_data)
- #endif
- #ifndef OPENSSL_NO_DTLS1_2_METHOD
- IMPLEMENT_dtls1_meth_func(DTLS1_2_VERSION, 0, SSL_OP_NO_DTLSv1_2,
- DTLSv1_2_method,
- ossl_statem_accept,
- ossl_statem_connect,
- dtls1_get_method, DTLSv1_2_enc_data)
- #endif
- IMPLEMENT_dtls1_meth_func(DTLS_ANY_VERSION, 0, 0,
- DTLS_method,
- ossl_statem_accept,
- ossl_statem_connect,
- dtls1_get_method, DTLSv1_2_enc_data)
- /*
- * DTLS server methods
- */
- static const SSL_METHOD *dtls1_get_server_method(int ver)
- {
- if (ver == DTLS_ANY_VERSION)
- return DTLS_server_method();
- #ifndef OPENSSL_NO_DTLS1
- else if (ver == DTLS1_VERSION)
- return DTLSv1_server_method();
- #endif
- #ifndef OPENSSL_NO_DTLS1_2
- else if (ver == DTLS1_2_VERSION)
- return DTLSv1_2_server_method();
- #endif
- else
- return NULL;
- }
- #ifndef OPENSSL_NO_DTLS1_METHOD
- IMPLEMENT_dtls1_meth_func(DTLS1_VERSION, SSL_METHOD_NO_SUITEB, SSL_OP_NO_DTLSv1,
- DTLSv1_server_method,
- ossl_statem_accept,
- ssl_undefined_function,
- dtls1_get_server_method, DTLSv1_enc_data)
- #endif
- #ifndef OPENSSL_NO_DTLS1_2_METHOD
- IMPLEMENT_dtls1_meth_func(DTLS1_2_VERSION, 0, SSL_OP_NO_DTLSv1_2,
- DTLSv1_2_server_method,
- ossl_statem_accept,
- ssl_undefined_function,
- dtls1_get_server_method, DTLSv1_2_enc_data)
- #endif
- IMPLEMENT_dtls1_meth_func(DTLS_ANY_VERSION, 0, 0,
- DTLS_server_method,
- ossl_statem_accept,
- ssl_undefined_function,
- dtls1_get_server_method, DTLSv1_2_enc_data)
- /*
- * DTLS client methods
- */
- static const SSL_METHOD *dtls1_get_client_method(int ver)
- {
- if (ver == DTLS_ANY_VERSION)
- return DTLS_client_method();
- #ifndef OPENSSL_NO_DTLS1
- else if (ver == DTLS1_VERSION || ver == DTLS1_BAD_VER)
- return DTLSv1_client_method();
- #endif
- #ifndef OPENSSL_NO_DTLS1_2
- else if (ver == DTLS1_2_VERSION)
- return DTLSv1_2_client_method();
- #endif
- else
- return NULL;
- }
- #ifndef OPENSSL_NO_DTLS1_METHOD
- IMPLEMENT_dtls1_meth_func(DTLS1_VERSION, SSL_METHOD_NO_SUITEB, SSL_OP_NO_DTLSv1,
- DTLSv1_client_method,
- ssl_undefined_function,
- ossl_statem_connect,
- dtls1_get_client_method, DTLSv1_enc_data)
- #endif
- #ifndef OPENSSL_NO_DTLS1_2_METHOD
- IMPLEMENT_dtls1_meth_func(DTLS1_2_VERSION, 0, SSL_OP_NO_DTLSv1_2,
- DTLSv1_2_client_method,
- ssl_undefined_function,
- ossl_statem_connect,
- dtls1_get_client_method, DTLSv1_2_enc_data)
- #endif
- IMPLEMENT_dtls1_meth_func(DTLS_ANY_VERSION, 0, 0,
- DTLS_client_method,
- ssl_undefined_function,
- ossl_statem_connect,
- dtls1_get_client_method, DTLSv1_2_enc_data)
|